USN-6976-1

Dashboard / Vulnerabilities / USN-6976-1

USN-6976-1

Summary: linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Details: Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099) It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-24860) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SuperH RISC architecture; - User-Mode Linux (UML); - GPU drivers; - HID subsystem; - MMC subsystem; - Network drivers; - PHY drivers; - SCSI drivers; - USB subsystem; - Xen hypervisor drivers; - GFS2 file system; - Memory management; - Bluetooth subsystem; - IPv4 networking; - IPv6 networking; - NFC subsystem; - HD-audio driver; - ALSA SH drivers; (CVE-2023-52806, CVE-2021-46924, CVE-2021-47521, CVE-2021-47542, CVE-2024-26903, CVE-2024-26654, CVE-2024-27013, CVE-2024-26600, CVE-2021-47518, CVE-2021-47171, CVE-2023-52629, CVE-2023-52644, CVE-2021-46904, CVE-2023-52470, CVE-2024-36901, CVE-2021-46906, CVE-2024-39292, CVE-2022-48659, CVE-2021-47173, CVE-2021-47571, CVE-2024-26929, CVE-2024-39484, CVE-2024-26687, CVE-2024-26679, CVE-2023-52760)

References: https://ubuntu.com/security/notices/USN-6976-1, https://ubuntu.com/security/CVE-2021-46904, https://ubuntu.com/security/CVE-2021-46906, https://ubuntu.com/security/CVE-2021-46924, https://ubuntu.com/security/CVE-2021-47171, https://ubuntu.com/security/CVE-2021-47173, https://ubuntu.com/security/CVE-2021-47518, https://ubuntu.com/security/CVE-2021-47521, https://ubuntu.com/security/CVE-2021-47542, https://ubuntu.com/security/CVE-2021-47571, https://ubuntu.com/security/CVE-2022-48659, https://ubuntu.com/security/CVE-2023-52470, https://ubuntu.com/security/CVE-2023-52629, https://ubuntu.com/security/CVE-2023-52644, https://ubuntu.com/security/CVE-2023-52760, https://ubuntu.com/security/CVE-2023-52806, https://ubuntu.com/security/CVE-2024-22099, https://ubuntu.com/security/CVE-2024-24860, https://ubuntu.com/security/CVE-2024-26600, https://ubuntu.com/security/CVE-2024-26654, https://ubuntu.com/security/CVE-2024-26679, https://ubuntu.com/security/CVE-2024-26687, https://ubuntu.com/security/CVE-2024-26903, https://ubuntu.com/security/CVE-2024-26929, https://ubuntu.com/security/CVE-2024-27013, https://ubuntu.com/security/CVE-2024-36901, https://ubuntu.com/security/CVE-2024-39292, https://ubuntu.com/security/CVE-2024-39484